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Feedback on Guidelines 08/2020 on 
the targeting of social media users 


Legitemate Interest Checkboxes 


As a privacy-conscious user of the Web, I'm worried by one particular new practice that is becoming 
more and more prevalent across privacy popups on popular websites, namely: the "<<Legitimate 
Interest>> checkbox". 


When visiting certain sites for the first time, such as vice.com or wp.pl the user is confronted with a 


popup that asks for their privacy preferences, and in advanced settings a "legitimate interest" checkbox 
appears next to certain "purposes": 


VICE | 


Reject All Purposes 

















Enable All Purposes 


Information We Collect About You 


You can use this tool to change your cookies preferences at any time or to 
reject all cookies. VICE uses cookies and similar tracking technologies on 
our websites to improve the user experience, personalise content and ads, 
provide social media features, and to analyse our traffic as outlined below. 
VICE also uses cookies to serve personalised ads on third-party websites 
within the Vice Digital Network. All information may be shared with social 
media services, advertisers, analytics and other third-party service providers. 
For more information about how VICE uses cookies, please go to 

our Cookies Policy. For general information about how VICE processes 
personal information, please go to our Privacy Policy. 








PURPOSES 


User Consent Legitimate Interest 


Purposes 





FEATURES SITE VENDORS 








© Custom Purposes 







Y Select personalised content 


Y Select personalised ads 


Y Select basic ads 


Y Create a personalised ads profile 


Y Create a personalised content profile 
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Wirtualna Polska Zezwalam  Uzasadniony interes 
< POWROT 


Partnerzy z IAB Zezwalam Uzasadniony interes 
Cele 

1. Przechowywanie informacji na urządzeniu lub dostęp do nich ~ 

2. Wybór podstawowych reklam ~ 

3. Tworzenie profilu spersonalizowanych reklam ~ 

4. Wybór spersonalizowanych reklam ~ 

5. Tworzenie profilu spersonalizowanych treści ~ 

6. Wybór spersonalizowanych treści ~ 


7. Pomiar wydajności reklam ~ 
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As a user I find it particularly confusing. I have no idea what influence on the legitimate interest I have. 
I know that if there is legitimate interest, acquiring consent is not only not necessary, but not allowed. It 
feels like trying to sneak in tracking that the user doesn't want. 


I believe that the official Guidelines should clarify in simple terms whether or not such practices are 
allowed or not. 


Tracking before acquiring consent 


Another prevalent practice that I'm observing on a daily basis is that sites show a "we value your 
privacy" pop-up where they ask for consent, but in actuality the tracking data to sites such as Facebook, 
Google or Gemius has been already sent before acquiring consent, sometimes even before the pop-up 
shows up. I think the guidelines should be very vocal against such practices. 


Thank you for your time spent on acknowledging my feedback. I hope it's useful to the process of 
creating clear guidelines for website administrators. 


